Sr. Security Analyst- Financial Systems, GFIT - Carnival Cruise Line

The Senior Security Analyst, Financial Systems is a senior member of the GFiT Governance & Security team and is responsible for leading and executing advanced security monitoring, risk assessment, and control activities across the GFiT environment. This role plays a key part in identifying, analyzing, and mitigating complex security risks impacting financial systems and data, while ensuring alignment with corporate security standards, ITGC/SOX requirements, and regulatory expectations.

In addition to hands‑on security operations, the Senior Security Analyst provides subject‑matter expertise during system implementations, enhancements, and incident response activities; partners closely with application, infrastructure, and governance teams; and supports internal and external audits. This role is expected to operate with a high degree of independence and contribute to continuous improvement of security processes and controls within the GFiT environment.

Responsibilities

Security Monitoring & Incident Management

Lead advanced monitoring and analysis of security alerts and logs from security tools, identifying trends, anomalies, and potential threats impacting GFiT financial systems.

Perform in‑depth investigation of complex security events and incidents, including root‑cause analysis, impact assessment, and coordination of remediation efforts with technical teams.

Serve as an escalation point for higher‑risk or cross‑functional security issues.

Risk Assessment & Control Oversight

Conduct and support security risk assessments across the GFiT environment, identifying control gaps and recommending risk‑based remediation strategies.

Evaluate the security impact of system changes, new applications, and enhancements, ensuring risks are identified and addressed early in the lifecycle.

Support ongoing ITGC and SOX control execution related to security monitoring, access management, and incident response.

Implementation & Change Support

Act as a security subject‑matter expert during implementations of new applications, integrations, and infrastructure changes, advising on secure design and configuration.

Review and assess security requirements, technical designs, and change requests to ensure alignment with corporate security standards and policies.

Partner with application, infrastructure, and PMO teams to ensure security considerations are embedded into delivery plans.

Audit, Compliance & Documentation

Serve as a key point of contact for internal and external auditors, supporting walkthroughs, evidence collection, and remediation discussions related to financial systems security.

Review and validate security documentation, procedures, and evidence to ensure audit readiness and consistency.

Identify opportunities to strengthen control design, documentation quality, and audit efficiency.

Continuous Improvement